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dn: cn=inanagerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsSimpleRole 
objectclass: nsManageredRole 
cn: managenole 

description: Manager Role within the Company 
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dn: uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 

objectclass: i)erson 

objectclass: inetorgperson 

uid: pointy 

gn: pointyhair 

sn: hair 

nsRoIeDN: cn=inanagerrole, dc=doin, dc=ain 
description: Pointy Haired Manager 
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dn: cn=buildingl2people, dc=dom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsFilteredRole 

cn: buildingl2people 

nsRoleFilter: building=12 

description: People who work in building 12 
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dn: cn=inegamanagenole, dc=doin, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsNestedRole 
cn: megamanagenole 

nsRoleDN: cn=managerrole, dc=dom, detain 
nsRoleDN: cn=networkmanager, dc=dom, dc=ain 
description: Super Manager Role within the Company 
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dn: cn=peonrole, dc=dom, dc=aiii 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsEnumeratedRole 
objectclass: groupofuniquenames 
cn: peonrole 

groupmember: uid=dboreham, ou=people, dc=doin, dc=aiii 
groupmember: uid=merrells, ou=people, dc=dom, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 
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FOR EACH ENTRY WITHIN SCOPE, 
THE COMPUTED ATTRIBUTE nsROLE 
IS CALCULATED. 

1 

THE COMPUTED ATTRIBUTE nsROlE 
IS EXAMINED TO SEE IF THE ROLE 
IS PRESENT. 

i 

THIS RESULTS IN A LIST OF 
ENTRIES THAT POSSESS THE ROLE. 



i 

THE LIST IS THEREAFTER 
RETURNED TO A CLIENT 
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RDN OF ENTRY 
{ NULL } 



DISTINGUISHED 
NAME OF ENTRY 



{null} 



{ COUNTRY = US} 



r ORGANIZATION = 
|_ MEGA CORP 



ORGANIZATIONAL 
UNITS = SALES; 
LOCATION = PALO 
ALTO 



^COUNTRY = US} 

{country = us} 

JTIRGANIZATION ="1 
\ MEGA CORP J 



{country = us} 

r ORGANIZATION =1 
\_ MEGA CORP J 
ORGANIZATIONAL 
UNIT = SALES; 
LOCATION = 
PALO ALTO 
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DN: cn= messaging_server_cos, ou= people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosClassicDefmition 
cosTemplate 

DN: cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifier: mailServiceCIass 
cosAttribute: mailboxpota 
cosAttribute: maysendexternalmail 
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dn: cn= user, cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass: top 

objectclass: mailserveniser 

objectclass: cosTemplate 

mailboxquota: 10000000 

maysendexternalmail: TRUE 

dn: cn=guest, cn=IailServerCOS, cn=LocalConfig, o=NetscapeRoot 

objectclass:top 

objectclass: mailserveniser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendexternalmail: FALSE 
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dn: cii= inessagiiig_server_cos, ou= people, o= 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosPointerDefinition 
cosTeraplateDn: ou=people, o=acme 
cosAttribute: facsimilieTelephoneNumber default 
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dn: cii= messaging_server_cos, ou= people, o=acme 

objectclass: top 

objectclass: LDAPSubentry 

objectclass: cosSuperDefmition 

objectclass: cosIndirectDefinition 

cosIndirectSpecifier: manager 

cosAttribute: accountingCode 
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